today I was asked by potential customer about possibility to configure MySQL table as an event data source - is it possible? Customer uses eDirectory (which is at this time not supported by the ESM as data source). At this time events from this eDirectory are forwarded to MySQL database, so - it is possible to connect to that data source by the receiver or the agent (Event Collector) and then - create custom parse rules?

Yes it it possilbe to collect those events using the Windows Event Receiver. You can find more information in the ESM Help under Contents > Appendix F > McAfee SQL Database Event Configuration File Utility. You will also need to create custom parse rules.

The SQL Database Event Configuration File Utility provides you with an easy way to generate the XML used by the McAfee ESMI Windows Event Collector to send events from a Microsoft SQL or Oracle Database. It is installed with the Windows Event Collector.

You need to download and install Oracle Data Access Components (ODAC) from the Oracle OTN website in order to connect to an Oracle database.

To generate the configuration XML to be used by the SQL Database Event Plugin, set up a new file by clicking on File > New and entering the required information on the following tabs:1. Connect to the database2. Map the database fields3. Test the generated query.

It is not currently possible for a receiver to collect events from a MySQL table. Adding that ability to a receiver has been discussed internally and may be added to a future release but I do not have any ETA for that inclusion.